Recently I asked a question about setting up to allow 'rsync' without terminal allowed, and found that the command I had to allow was "rsync --server -dlogDtpr .". THe command I was using was something like "rsync -a --rsh sshg3 file host:file". It still isn't working for the clients I was trying to get it working for. They are using a command like "rsync -av -e ssh2 user@host:/foo/bar /foo/bar" (where ssh2 is symlinked to sshg3), and the command it complains about in the log is "rsync --server --sender -vlogDtpre.is . /foo/bar/". How does one get from point A to point B, i.e. how do I know what to allow from what the uer is trying to do? Is there a way to tell Tectia that "rsync is OK, don't be fussy about parameters"?

OK, it appears that what you see is what you get -- there is no special syntax for this. For my situation, the solution turned out to be using rsync's "pseudo-daemon" mode so that the only allowed command was rsync --server --daemon .